Privacy Policy

Last updated: 2 October 2026

Who we are

Leadpipe is made by Leonardo Seccia, a sole trader trading as AlrightMyLover, based in the United Kingdom ("we", "us"). We are the data controller for the data described here.

Questions about privacy, or requests about your data: privacy@leadpipe.online.

What we collect

1. Gameplay stats (you can switch them off)

To see which levels are too hard or too easy, the game sends us:

• A random ID. The game makes this up the first time it runs. It isn't tied to your phone's hardware IDs, its advertising ID, your Apple or Google account or your name. Switching stats off deletes it, and switching them on again makes a new one. Reinstalling the game also starts afresh.
• Game events:
  • The first time the game opens, when stats are switched on, and when a session starts, goes to the background or comes back, with how long it has lasted.
  • A level started, won, lost or left part way (and why it was lost: a leak, mixed-up liquids, the wrong liquid, the liquid never reaching the drain, or a pipe too short), the stars and star bubbles collected, how long it took, pieces laid, power-ups and plugs used, board coins picked up, and running out of lives.
  • A plug offered after a loss, and whether it was bought or turned down.
  • Power-ups used or given to you, things bought in the shop, lives refilled, and every coin earned or spent (what for, and the balance after).
  • Daily gifts and missions claimed.
  • Whether you allowed reminders when asked, and a reminder you tapped to open the game.
  • A coin pack purchase started, completed or not completed (and why, for example cancelled or a store error).
  • An achievement earned for the first time, and when the game asked the store to show its rating sheet.
  • The first error the game hits in a session: its first line, with file paths, IDs and email addresses taken out, so we can fix bugs.
  • Signing in or linking an account (only which kind: Google Play Games, Game Center or Apple), choosing between this phone's progress and your saved progress, unlinking an account, signing out, deleting your account, and our server turning down a coin change.
• Basic app details: the app version, the platform (Android or iOS) and the version of the levels.
• Your country, worked out from your connection by our hosting provider when the stats arrive. We never store your IP address.

We use this only to improve the game (balancing levels, finding bugs, understanding which features people use). It isn't used for advertising and isn't combined with data from anywhere else.

How to turn it off: open Settings in the game and switch off "Share usage stats". The game stops collecting stats straight away, throws away any it hasn't sent yet, and deletes the random ID from your phone.

Your IP address

When the game connects to our servers, they see your IP address, as any internet service does. We use it only for a moment, to work out your country for stats and to stop too many requests from one place. We don't store it.

2. Your account (only if you sign in)

Signing in is optional; the game plays fully as a guest. You can sign in with Google Play Games on Android, or with Game Center or Sign in with Apple on iPhone and iPad. If you do, we keep:

• The ID your sign-in service gives us: your Play Games player ID, display name and profile picture link; your Game Center player ID and nickname; or, for Sign in with Apple, the anonymous user ID Apple makes for Leadpipe. We don't ask Apple for your name or email address. We use these to find your account and to show your name in the game.
• Your saved game: levels cleared, stars, coins, lives, power-ups, the daily gift streak and daily missions, any unlimited-lives timers, plus when it was last saved. Your settings stay on your phone.
• Your coin history: each time you earn or spend coins, the amount, what it was for (for example "level" or "continue (plug)") and when. This keeps your balance right across phones and stops cheating.
• A sign-in key for each phone you're signed in on. We only store a scrambled (hashed) copy of it, which can't be turned back into the key.
• A bonus mark for each sign-in account you use: a keyed, scrambled (hashed) copy of its ID, noting that it has had the sign-in bonus and brought a phone's coins along. It is kept even after you delete your account (see "How long we keep it").

Your account uses its own player ID. It is never sent with the gameplay stats, so those stats can't be linked to your name.

How to stop: in the game, open Settings and tap Manage next to Account. Sign out stops syncing on that phone. Delete my account deletes everything listed above from our server, apart from the bonus marks. Your phone keeps its progress and carries on as a guest.

Google's handling of your Play Games profile is covered by the Google Privacy Policy, and Apple's handling of Game Center and Sign in with Apple by Apple's Privacy Policy.

3. Purchases

If you buy coins, the payment is handled entirely by Google Play or the App Store. We never see your card or bank details, your name or your email address. To make sure a purchase is genuine before we give you the coins, the game sends our server the purchase token (Google Play) or signed transaction (App Store) the store gives it, with a random purchase-check ID, and our server checks it with the store. This ID is made on your phone the first time a purchase is checked. It is not the stats ID and is never sent with stats, so it's used even if you switched stats off. It's used to stop abuse (rate limiting) and to recognise the same phone asking about the same purchase again.

For every purchase that passes the check, whether you're signed in or not, we keep a purchase record so the same purchase can't be counted twice. It holds:

• a scrambled (hashed) copy of the purchase's ID (Google's order ID or Apple's transaction ID), and of Google's purchase token, never the IDs themselves;
• which pack it was, how many, when, and whether it was a test purchase;
• the random purchase-check ID of the phone that sent it;
• if you were signed in (or sign in later on the same phone), your account's player ID, so the coins go to that account and only that one.

The purchase record never holds your name, email address or payment details. If you're signed in, we also add the coins to your account's coin history. If you bought coins while signed out and later sign in on the same phone, the game asks our server about those purchases again so the coins are added to your account.

4. Game settings from our server

So we can tune things like rewards and prices without an update, the game may fetch a small settings file from our server. The request carries only the app version and platform. Nothing is stored about it.

5. Data that stays on your phone

Your progress, coins, lives and settings are saved on your phone. If you play as a guest, we can't see them. If you sign in, a copy of your progress (not your settings) is also kept in your account, as described above. If your phone backs up app data to your Google or iCloud account, that backup is handled by Google or Apple.

If you allow notifications, the game's reminders (your daily gift, full hearts, a nudge after a few days away) are scheduled on your phone itself. No server sends them. Gameplay stats include whether you allowed notifications and which reminder you tapped, and nothing else about them. Switch reminders off any time in the game's Settings or in your phone's settings.

6. If you ask us to tell you when the game is out

Until Leadpipe is in the stores, this website has a "Tell me when it's out" link that opens an email to us. If you send it, we keep your email address (and anything you wrote) only to send you one message on the day the game comes out. We use it for nothing else, don't add it to any other list and don't share it. The legal basis is your consent. We delete your address once that message has gone out. You can change your mind at any time before then: reply or email hello@leadpipe.online and we'll delete it.

7. If you report a problem

Settings in the game has a Report a problem button. It opens an email to us in your own mail app, already filled in with the game's version, your phone's platform and system version, the version of the levels and the last few lines of the game's own error log (file paths, IDs and email addresses taken out). Nothing is sent unless you send that email, and you can read or change it first. We keep it as we keep any email you send us (see below).

What the game doesn't collect

The game doesn't collect your email address, phone number, contacts, photos, precise location, advertising ID or device hardware IDs. We only have a name if you sign in, and then only the display name or nickname you chose for Google Play Games or Game Center. We don't read your friends list. The game has no ads and no third-party advertising or tracking code, and it never tracks you across other companies' apps or websites.

Legal basis

Under UK GDPR, we collect gameplay stats because we have a legitimate interest in making the game better, and you can object at any time by switching them off in Settings. We check coin grants, limit how often the game can call our servers, and keep hashed sign-in keys because we have a legitimate interest in stopping cheating and abuse. We answer your emails because we have a legitimate interest in helping you. If you ask us to tell you when the game is out, we keep your email address for that with your consent, which you can withdraw at any time. We process purchase checks, and your account data if you sign in, because they are needed to provide what you asked for (performance of a contract): delivering what you bought, and keeping your progress and coins in your account.

Who handles the data

Cloudflare may process data outside the UK, including in the United States. Where that happens it is covered by appropriate safeguards such as the UK International Data Transfer Addendum and Cloudflare's certification under the UK Extension to the EU-US Data Privacy Framework.

We don't sell your data, and we don't share it with anyone else unless the law requires us to. We don't make automated decisions that significantly affect you.

Keeping it safe

The game talks to our servers only over encrypted connections (HTTPS). Sign-in keys and purchase IDs are stored only as one-way hashes. Only we can access the data, through our hosting provider's access-controlled tools.

How long we keep it

• Gameplay stats are deleted automatically after about 3 months. We may keep totals and averages (for example "how many players finished level 20") for longer; those can't be linked to anyone.
• Purchase records (the hashed purchase ID, the pack, the purchase-check ID and, if signed in, the player ID) are deleted automatically 2 years after the purchase, long enough to stop a purchase being counted twice. In a signed-in player's coin history, the purchase's entry is kept until the account is deleted.
• Account data (your sign-in details, saved game and coin history) is kept until you delete your account. An account is also deleted after 12 months without being used. Either way, it is deleted from our server straight away, and from our hosting provider's backups within 30 days.
• A sign-in on a phone expires after 180 days without being used, and its hashed sign-in key is deleted.
• When an account is deleted, we keep one thing: a keyed, scrambled (hashed) copy of each sign-in account ID it used (your Play Games, Game Center or Apple ID), with a note that it has had the sign-in bonus and brought a phone's coins along. It holds no player ID, saved game or coins, and only someone with our secret key and your sign-in ID could match it to you. We keep it so the sign-in bonus and the coin carry-over can't be claimed twice by deleting an account and signing up again. It isn't deleted.
• Emails you send us are kept for as long as we need them to help you, and then deleted.
• If you asked us to tell you when the game is out, your email address is deleted once we've sent that message, or sooner if you ask.

Your rights

Under UK data protection law you have the right to access, correct or delete your data, to object to or restrict how we use it, and to data portability. If you have an account, you can delete it yourself in the game. The gameplay stats hold only a random ID and not your name, so we may not be able to tell which of those records are yours; see Delete your data for how requests work.

To use any of these rights, email privacy@leadpipe.online.

If you're unhappy with how we've handled your data, email privacy@leadpipe.online with the subject "Privacy complaint". We'll confirm we've received it within 30 days and tell you what we've done about it as soon as we can. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

Leadpipe is made for players aged 13 and over and isn't directed at children under 13. We don't knowingly collect personal information from children. If you think a child under 13 has sent us personal information (for example in an email), contact us and we'll delete it.

This website

This website doesn't use cookies, analytics or trackers, and it loads nothing from anyone else: even its fonts come from our own site. Like any website, our hosting provider sees your IP address when your browser asks for a page.

Changes

If we change this policy we'll update the date at the top of this page. If the change is significant, for example if we start collecting something new, we'll also tell you in the game.